Home | History | Annotate | Line # | Download | only in common
pf.c revision 1.3
      1  1.3  thorpej /*	$NetBSD: pf.c,v 1.3 1997/03/25 03:07:27 thorpej Exp $	*/
      2  1.3  thorpej 
      3  1.1      cjs /*
      4  1.1      cjs  * Copyright (c) 1993-95 Mats O Jansson.  All rights reserved.
      5  1.1      cjs  * Copyright (c) 1990 The Regents of the University of California.
      6  1.1      cjs  * All rights reserved.
      7  1.1      cjs  *
      8  1.1      cjs  * This code is partly derived from rarpd.
      9  1.1      cjs  *
     10  1.1      cjs  * Redistribution and use in source and binary forms, with or without
     11  1.1      cjs  * modification, are permitted provided that the following conditions
     12  1.1      cjs  * are met:
     13  1.1      cjs  * 1. Redistributions of source code must retain the above copyright
     14  1.1      cjs  *    notice, this list of conditions and the following disclaimer.
     15  1.1      cjs  * 2. Redistributions in binary form must reproduce the above copyright
     16  1.1      cjs  *    notice, this list of conditions and the following disclaimer in the
     17  1.1      cjs  *    documentation and/or other materials provided with the distribution.
     18  1.1      cjs  * 3. All advertising materials mentioning features or use of this software
     19  1.1      cjs  *    must display the following acknowledgement:
     20  1.1      cjs  *	This product includes software developed by Mats O Jansson.
     21  1.1      cjs  * 4. The name of the author may not be used to endorse or promote products
     22  1.1      cjs  *    derived from this software without specific prior written permission.
     23  1.1      cjs  *
     24  1.1      cjs  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     25  1.1      cjs  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
     26  1.1      cjs  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
     27  1.1      cjs  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
     28  1.1      cjs  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
     29  1.1      cjs  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
     30  1.1      cjs  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
     31  1.1      cjs  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     32  1.1      cjs  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
     33  1.1      cjs  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     34  1.1      cjs  */
     35  1.1      cjs 
     36  1.1      cjs #ifndef LINT
     37  1.3  thorpej static char rcsid[] = "$NetBSD: pf.c,v 1.3 1997/03/25 03:07:27 thorpej Exp $";
     38  1.1      cjs #endif
     39  1.1      cjs 
     40  1.1      cjs #include <stdio.h>
     41  1.1      cjs #include <unistd.h>
     42  1.1      cjs #include <sys/types.h>
     43  1.1      cjs #include <sys/time.h>
     44  1.1      cjs #include <sys/ioctl.h>
     45  1.1      cjs #include <sys/file.h>
     46  1.1      cjs #include <sys/socket.h>
     47  1.1      cjs #include <sys/uio.h>
     48  1.1      cjs #include <net/if.h>
     49  1.1      cjs 
     50  1.1      cjs #include <net/bpf.h>
     51  1.1      cjs #include <sys/errno.h>
     52  1.1      cjs 
     53  1.1      cjs #include <netinet/in.h>
     54  1.2    veego #include <netinet/if_inarp.h>
     55  1.1      cjs 
     56  1.1      cjs #include <netdb.h>
     57  1.1      cjs #include <ctype.h>
     58  1.1      cjs #include <strings.h>
     59  1.1      cjs 
     60  1.1      cjs #include <syslog.h>
     61  1.1      cjs #include <varargs.h>
     62  1.1      cjs 
     63  1.1      cjs #include "common/mopdef.h"
     64  1.1      cjs 
     65  1.1      cjs /*
     66  1.1      cjs  * Variables
     67  1.1      cjs  */
     68  1.1      cjs 
     69  1.1      cjs extern int errno;
     70  1.1      cjs extern int promisc;
     71  1.1      cjs 
     72  1.1      cjs /*
     73  1.1      cjs  * Return information to device.c how to open device.
     74  1.1      cjs  * In this case the driver can handle both Ethernet type II and
     75  1.1      cjs  * IEEE 802.3 frames (SNAP) in a single pfOpen.
     76  1.1      cjs  */
     77  1.1      cjs 
     78  1.1      cjs int
     79  1.1      cjs pfTrans(interface)
     80  1.1      cjs 	char *interface;
     81  1.1      cjs {
     82  1.1      cjs 	return TRANS_ETHER+TRANS_8023+TRANS_AND;
     83  1.1      cjs }
     84  1.1      cjs 
     85  1.1      cjs /*
     86  1.1      cjs  * Open and initialize packet filter.
     87  1.1      cjs  */
     88  1.1      cjs 
     89  1.1      cjs int
     90  1.1      cjs pfInit(interface, mode, protocol, typ)
     91  1.1      cjs 	char *interface;
     92  1.1      cjs 	u_short protocol;
     93  1.1      cjs 	int typ, mode;
     94  1.1      cjs {
     95  1.1      cjs 	int	fd;
     96  1.1      cjs 	int	n = 0;
     97  1.1      cjs 	char	device[sizeof "/dev/bpf000"];
     98  1.1      cjs 	struct ifreq ifr;
     99  1.1      cjs 	u_int	dlt;
    100  1.1      cjs 	int	immediate;
    101  1.1      cjs 
    102  1.1      cjs 	static struct bpf_insn insns[] = {
    103  1.1      cjs 		BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 12),
    104  1.1      cjs 		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0x4711, 4, 0),
    105  1.1      cjs 		BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 20),
    106  1.1      cjs 		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0x4711, 0, 3),
    107  1.1      cjs 		BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 14),
    108  1.1      cjs 		BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0xaaaa, 0, 1),
    109  1.1      cjs 		BPF_STMT(BPF_RET | BPF_K, 1520),
    110  1.1      cjs 		BPF_STMT(BPF_RET | BPF_K, 0),
    111  1.1      cjs 	};
    112  1.1      cjs 	static struct bpf_program filter = {
    113  1.1      cjs 		sizeof insns / sizeof(insns[0]),
    114  1.1      cjs 		insns
    115  1.1      cjs 	};
    116  1.1      cjs 
    117  1.1      cjs   	/* Go through all the minors and find one that isn't in use. */
    118  1.1      cjs 	do {
    119  1.1      cjs 		(void) sprintf(device, "/dev/bpf%d", n++);
    120  1.1      cjs 		fd = open(device, mode);
    121  1.1      cjs 	} while (fd < 0 && errno == EBUSY);
    122  1.1      cjs 
    123  1.1      cjs 	if (fd < 0) {
    124  1.1      cjs       		syslog(LOG_ERR,"pfInit: open bpf %m");
    125  1.1      cjs 		return(-1);
    126  1.1      cjs 	}
    127  1.1      cjs 
    128  1.1      cjs 	/* Set immediate mode so packets are processed as they arrive. */
    129  1.1      cjs 	immediate = 1;
    130  1.1      cjs 	if (ioctl(fd, BIOCIMMEDIATE, &immediate) < 0) {
    131  1.1      cjs       		syslog(LOG_ERR,"pfInit: BIOCIMMEDIATE: %m");
    132  1.1      cjs 		return(-1);
    133  1.1      cjs 	}
    134  1.1      cjs 	(void) strncpy(ifr.ifr_name, interface, sizeof ifr.ifr_name);
    135  1.1      cjs 	if (ioctl(fd, BIOCSETIF, (caddr_t) & ifr) < 0) {
    136  1.1      cjs       		syslog(LOG_ERR,"pfInit: BIOCSETIF: %m");
    137  1.1      cjs 		return(-1);
    138  1.1      cjs 	}
    139  1.1      cjs 	/* Check that the data link layer is an Ethernet; this code won't work
    140  1.1      cjs 	 * with anything else. */
    141  1.1      cjs 	if (ioctl(fd, BIOCGDLT, (caddr_t) & dlt) < 0) {
    142  1.1      cjs       		syslog(LOG_ERR,"pfInit: BIOCGDLT: %m");
    143  1.1      cjs 		return(-1);
    144  1.1      cjs 	}
    145  1.1      cjs 	if (dlt != DLT_EN10MB) {
    146  1.1      cjs       		syslog(LOG_ERR,"pfInit: %s is not ethernet", device);
    147  1.1      cjs 		return(-1);
    148  1.1      cjs 	}
    149  1.1      cjs 	if (promisc) {
    150  1.1      cjs 		/* Set promiscuous mode. */
    151  1.1      cjs 		if (ioctl(fd, BIOCPROMISC, (caddr_t)0) < 0) {
    152  1.1      cjs       			syslog(LOG_ERR,"pfInit: BIOCPROMISC: %m");
    153  1.1      cjs 			return(-1);
    154  1.1      cjs 		}
    155  1.1      cjs 	}
    156  1.1      cjs 	/* Set filter program. */
    157  1.1      cjs 	insns[1].k = protocol;
    158  1.1      cjs 	insns[3].k = protocol;
    159  1.1      cjs 
    160  1.1      cjs 	if (ioctl(fd, BIOCSETF, (caddr_t) & filter) < 0) {
    161  1.1      cjs       		syslog(LOG_ERR,"pfInit: BIOCSETF: %m");
    162  1.1      cjs 		return(-1);
    163  1.1      cjs 	}
    164  1.1      cjs 	return(fd);
    165  1.1      cjs }
    166  1.1      cjs 
    167  1.1      cjs /*
    168  1.1      cjs  * Add a Multicast address to the interface
    169  1.1      cjs  */
    170  1.1      cjs 
    171  1.1      cjs int
    172  1.1      cjs pfAddMulti(s, interface, addr)
    173  1.1      cjs 	int s;
    174  1.1      cjs 	char *interface, *addr;
    175  1.1      cjs {
    176  1.1      cjs 	struct ifreq ifr;
    177  1.1      cjs 	int	fd;
    178  1.1      cjs 
    179  1.1      cjs 	strcpy(ifr.ifr_name, interface);
    180  1.1      cjs 
    181  1.1      cjs 	ifr.ifr_addr.sa_family = AF_UNSPEC;
    182  1.1      cjs 	bcopy(addr, ifr.ifr_addr.sa_data, 6);
    183  1.1      cjs 
    184  1.1      cjs 	/*
    185  1.1      cjs 	 * open a socket, temporarily, to use for SIOC* ioctls
    186  1.1      cjs 	 *
    187  1.1      cjs 	 */
    188  1.1      cjs 	if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
    189  1.1      cjs 		syslog(LOG_ERR, "pfAddMulti: socket: %m");
    190  1.1      cjs 		return(-1);
    191  1.1      cjs 	}
    192  1.1      cjs 	if (ioctl(fd, SIOCADDMULTI, (caddr_t)&ifr) < 0) {
    193  1.1      cjs 		syslog(LOG_ERR, "pfAddMulti: SIOCADDMULTI: %m");
    194  1.1      cjs 		close(fd);
    195  1.1      cjs 		return(-1);
    196  1.1      cjs 	}
    197  1.1      cjs 	close(fd);
    198  1.1      cjs 
    199  1.1      cjs 	return(0);
    200  1.1      cjs }
    201  1.1      cjs 
    202  1.1      cjs /*
    203  1.1      cjs  * Delete a Multicast address from the interface
    204  1.1      cjs  */
    205  1.1      cjs 
    206  1.1      cjs int
    207  1.1      cjs pfDelMulti(s, interface, addr)
    208  1.1      cjs 	int s;
    209  1.1      cjs 	char *interface, *addr;
    210  1.1      cjs {
    211  1.1      cjs 	struct ifreq ifr;
    212  1.1      cjs 	int	fd;
    213  1.1      cjs 
    214  1.1      cjs 	strcpy(ifr.ifr_name, interface);
    215  1.1      cjs 
    216  1.1      cjs 	ifr.ifr_addr.sa_family = AF_UNSPEC;
    217  1.1      cjs 	bcopy(addr, ifr.ifr_addr.sa_data, 6);
    218  1.1      cjs 
    219  1.1      cjs 	/*
    220  1.1      cjs 	 * open a socket, temporarily, to use for SIOC* ioctls
    221  1.1      cjs 	 *
    222  1.1      cjs 	 */
    223  1.1      cjs 	if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
    224  1.1      cjs 		syslog(LOG_ERR, "pfDelMulti: socket: %m");
    225  1.1      cjs 		return(-1);
    226  1.1      cjs 	}
    227  1.1      cjs 	if (ioctl(fd, SIOCDELMULTI, (caddr_t)&ifr) < 0) {
    228  1.1      cjs 		syslog(LOG_ERR, "pfAddMulti: SIOCDELMULTI: %m");
    229  1.1      cjs 		close(fd);
    230  1.1      cjs 		return(-1);
    231  1.1      cjs 	}
    232  1.1      cjs 	close(fd);
    233  1.1      cjs 
    234  1.1      cjs 	return(0);
    235  1.1      cjs }
    236  1.1      cjs 
    237  1.1      cjs /*
    238  1.1      cjs  * read a packet
    239  1.1      cjs  */
    240  1.1      cjs 
    241  1.1      cjs int
    242  1.1      cjs pfRead(fd, buf, len)
    243  1.1      cjs 	int	fd, len;
    244  1.1      cjs 	u_char *buf;
    245  1.1      cjs {
    246  1.1      cjs 	return(read(fd, buf, len));
    247  1.1      cjs }
    248  1.1      cjs 
    249  1.1      cjs /*
    250  1.1      cjs  * write a packet
    251  1.1      cjs  */
    252  1.1      cjs 
    253  1.1      cjs int
    254  1.1      cjs pfWrite(fd, buf, len, trans)
    255  1.1      cjs 	int fd, len, trans;
    256  1.1      cjs 	u_char *buf;
    257  1.1      cjs {
    258  1.1      cjs 
    259  1.1      cjs 	struct iovec iov[2];
    260  1.1      cjs 
    261  1.1      cjs 	switch (trans) {
    262  1.1      cjs 	case TRANS_8023:
    263  1.1      cjs 		iov[0].iov_base = (caddr_t)buf;
    264  1.1      cjs 		iov[0].iov_len = 22;
    265  1.1      cjs 		iov[1].iov_base = (caddr_t)buf+22;
    266  1.1      cjs 		iov[1].iov_len = len-22;
    267  1.1      cjs 		break;
    268  1.1      cjs 	default:
    269  1.1      cjs 		iov[0].iov_base = (caddr_t)buf;
    270  1.1      cjs 		iov[0].iov_len = 14;
    271  1.1      cjs 		iov[1].iov_base = (caddr_t)buf+14;
    272  1.1      cjs 		iov[1].iov_len = len-14;
    273  1.1      cjs 		break;
    274  1.1      cjs 	}
    275  1.1      cjs 
    276  1.1      cjs 	if (writev(fd, iov, 2) == len)
    277  1.1      cjs 		return(len);
    278  1.1      cjs 
    279  1.1      cjs 	return(-1);
    280  1.1      cjs }
    281  1.1      cjs 
    282